As for the log file, by launching the war file directly from the command line with java, i.e., using systemd, the logging information sent to the console is captured by systemd where it can be viewed with journalctl (i.e., systemd logging), but not to ~<cas_user>/.gradle/daemon/<gradle_version>/daemon-<pid>.out.log . Once through with debugging, I modified log4j2.xml to limit what is sent to the console. Specifically, I removed the <AppenderRef ref="casConsole"/> line at the bottom, then changed most of the*.level properties to "warn" rather than "info" or "debug" (exception: cas.log.level is set to "info"). Log entries appended to the "casFile" and "casAudit" appenders are written only to the files associated with those appenders (by default, cas.log and cas_audit.log), not to systemd logs.
I believe my questions have been answered, but also welcome additional recommendations.